Privacy & data protection notice

Data we collect

We collect only the information required to assess an application and to meet our legal obligations as a lender.

• Identity data: first name, last name, date of birth and identification documents
• Contact data: email address, telephone number and correspondence address
• Financial data: employment status, income, existing obligations and loan purpose
• Technical data: IP address and device information captured when you submit a form

Why we process it

Personal data is processed to perform steps at your request prior to entering a contract, to perform the credit agreement itself, to comply with anti-money-laundering and know-your-customer obligations, and for the legitimate interest of preventing fraud.

Who we share it with

Data is shared only where necessary to deliver the facility. We do not sell personal data or share it for third-party marketing.

• Corresponding financial institutions used to disburse approved funds
• Identity verification, sanctions screening and fraud prevention providers
• Professional advisers, auditors and regulators where legally required

International transfers

We operate from offices in New York, London, Hong Kong and Cape Town. Where data moves between these jurisdictions it is transferred under standard contractual clauses or an equivalent safeguard.

Retention

Application data for declined or withdrawn applications is retained for twelve months. Data relating to funded facilities is retained for the life of the agreement plus seven years to satisfy financial-record obligations.

Your rights

Subject to local law, you may exercise the following rights at no cost by writing to our lending desk. We respond within thirty calendar days.

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete records
• Request erasure where we no longer have a lawful basis to retain the data
• Object to or restrict processing, and request data portability
• Withdraw consent where processing relies on consent

Security

Application submissions are transmitted over encrypted connections and access to applicant records is restricted to authorised underwriting and compliance staff on a need-to-know basis.